If a poll was taken of all U.S. companies using the personal information of European Union (EU) residents in connection with their business activities, most would report having taken steps to comply with the General Data Protection Regulation (GDPR). If you asked the same businesses what they have done to comply with the EU ePrivacy Directive of 2002 (also known as the “Cookies” Directive)[1], which regulates the use of cookies and other tracking technologies, many would need to admit they have not done anything.